The Central Board of Secondary Education (CBSE) has acknowledged vulnerabilities in its OnMark portal, following revelations by ethical hacker Nisarga Adhikary. Adhikary highlighted a serious security flaw that could potentially allow unauthorized access to answer sheets and question papers.
Details of the Vulnerability
Adhikary demonstrated how the portal could be exploited to "paginate and enumerate" sensitive examination materials. This loophole raises concerns about data integrity and privacy. The hacker hinted at additional weaknesses that could compromise the system further.
CBSE's Response
In an official statement, CBSE confirmed the existence of these vulnerabilities and assured that efforts are underway to address them. The board stated that it is working to rule out other potential weaknesses in the portal to secure the examination process.
The incident underscores the importance of robust cybersecurity measures in educational platforms. CBSE has urged stakeholders to report any suspicious activities and reiterated its commitment to safeguarding student data.
